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Abstract 

There is a sentence in the language of 1ST, Nelson's internal set 
theory, which is not equivalent in 1ST to a sentence in the G-language. 
Thus the Reduction algorithm, that converts bounded 1ST formulas 
with standard parameters to provably (in 1ST) equivalent G-formulas, 
cannot be extended to all formulas of the 1ST language. 

Introduction. Internal set theory 1ST was invented by Nelson [1977] 
as an attempt to develop nonstandard mathematics from a unified axiomat- 
ical standpoint. This theory has demonstrated its ability to ground vari- 
ous branches of nonstandard analysis, see e.g. van den Berg [1987], F. and 
M.Diener [1988], F.Diener and Reeb [1989], Reeken [1992]. 

It is regarded as one of the advantages of 1ST that there exists a simple 
algorithm, introduced also by Nelson, to transform sentences in the language 
of 1ST to provably equivalent (in the sense of provability in 1ST) sentences 
formulated in the ZFC language. This algorithm, together with Nelson's 
theorem that 1ST is a conservative extension of ZFC, is used sometimes 
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(see e.g. Nelson [1988]) to give back to the statement that 1ST is nothing 
more than a new way to investigate the standard ZFC universe. 

This is true, indeed, so far as bounded 1ST formulas are considered. (The 
mentioned algorithm works for these formulas only.) 

It is the aim of this paper to demonstrate that there is a certain, explicitly 
given sentence in the 1ST language which is not provably equivalent in 1ST 
to a sentence in the G-language. Thus the 1ST truth cannot be completely 
reduced to the ZFC truth. 

A sentence of this kind has to be undecidable in 1ST; actually the sen- 
tence we consider belongs to a type of undecidable sentences discovered and 
studied in Kanovei [1991]. It is as follows: 

(*) VF [ V^*n (F(n) is standard) — > V«*n (F(n) = G{n)) ]. 

( n is assumed to range over integers, F and G over functions defined on 
integers and taking arbitrary values.) 

Theorem 1. Let $ be an arbitrary ^-sentence. Then the equivalence 
$ < — > (*) is not a theorem of 1ST unless 1ST is inconsistent . 

(Take notice that ZFC and 1ST are equiconsistent.) The idea of the 
proof is to construct a ZFC model V which has two different 1ST exten- 
sions, *V and *V such that (*) is false in *V but true in *V '. Both 
*V and *V ' are elementary extensions of V with respect to G-sentences 
by the 1ST Transfer, hence true (parameterfree) G-sentences are the same 
in both extensions. This proves the theorem. This reasoning is carried out 
in the assumption of the existence of a cardinal such that V^, the t^th 
level of the von Neumann hierarchy of sets, is a ZFC model. It will be shown 
at the end of the paper how this assumption can be abandoned. 

Acknowledgement. The author is in debt to M.Reeken and S.Albeverio 
for their interest to this research direction and practical help. 

Preliminaries. Theory 1ST was introduced in Nelson [1977]. The 
1ST language contains, together with equality, the membership predicate 
G and the standardness predicate st. Formulas of this language are called 
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si-E-form,ulas while formulas of the ZFC language are called E- formulas, 
and also internal formulas. Two abbreviations are very useful: B'^'^x... and 
\/^^x ... (there exists standard x for all standard x ...). 

1ST contains all axioms of ZFC (Separation and Replacement are for- 
mulated in the e-language) together with the following three additional prin- 
ciples or (schemes of) axioms. 

Idealization I: V'^^M Va e A^i x,a) < — > 3xy^a^{x,a) 

for any internal formula $(x, a). 

Standardization S: V'*X V'*x [xeY < — > xeX k $(x) ] 

for any st-G-formula 

Transfer T: 3x^{x) — )• 3^*a; $(a;) 

for any internal formula ^{x) with standard parameters. □ 

The formula $ can, of course, contain arbitrary parameters in I and S. 

Thus 1ST = ZFC + I + S + T. We would refer to this theory as plain 
1ST since there have been introduced several modifications, say, by a kind of 
superstructure over 1ST (see Nelson [1988]) with the purpose to extend the 
Reduction algorithm to a more wide class of st-G-formulas. 

Let be a transitive ZFC model in the ZFC universe. We say that an 
1ST model *V = ( V ; *G, *=, *st) is a regular 1ST extension of V if and 
only if there exists an 1-1 embedding * : V onto a subset of *V satisfying 

1) x e y < — > *x *G *y and x = y < — > *x *= *y for aU x,y eV, and 

2) *st X i — ^ 3xeV {*x *= X) for aU X e *V . 

It is not assumed, in general, that *= coincides with the true equality on 
*V , but *= has to be an equivalence relation and satisfy the logic axioms 
for equaUty with respect to *e and ^t. 

Ground model. Thus it is assumed that there exist cardinals such 
that VJ? is a model of ZFC. (This assumption is valid during the proof of 
Theorem 2 below.) Let be the least among the cardinals of this kind. We 
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use the set V = as the ground ZFC modeL 
The first version of Theorem 1 is as follows: 

Theorem 2. Assume that the axiom of constructibility V = L holds. 
The model V has two regular 1ST extensions, *V and *V such that 
{*) is false in *V but true in V 

Proof. The principal property implied by the minimality of is that 
has countable cofinality. Let, indeed, (pm{vi, Vn^), m & u>, be a recursive 
enumeration of all parameterfree e-formulas. It is a theorem of ZFC (the 
Reflection principle, applied in V ) that for each integer n there exists a 
cardinal k < d such that is an elementary submodel of with respect 
to all sentences of type a;„^), where m < n and x&Y^- Let «;„ 

denote the least cardinal k of such a kind; then k„ < Kn+i for all n. 

Lemma 3. — sup^^^Kn- 

Proof. Let, on the contrary, •§ > k — swp^^^Kn- By the definition of 
V = Vk is an elementary submodel of V with respect to all formulas 
having sets in V as parameters, hence a ZFC model, which contradicts the 
choice of i}. □ 

The sequence of ordinals Kn plays an extremely important role in the 
proof of Theorem 1 since it is the one that gives a counterexample to (*) in 
the extension of V where (*) fails. 

The essential consequence of the assumption of V = L here is that a 
certain relation <l wcllorders the universe of all sets V in such a way that 
the following property is guaranteed: given a cardinal i? such that is 
a ZFC model, the relation <l wellorders with order type and is 
e-definablc in V^. This will be used in the construction of the model *V 
where (*) is true, and is irrelevant to the other extension, *V . 

The ultrafilter. Both extensions, *V and *V ' , arc constructed as ul- 
trapowers of V via a common ultrafilter, a kind of adequate ultrafilters of 
Nelson [1977]. (Original Nelson's construction includes infinite number of 
successive ultrapowers; we show here that this can be managed an one-step 
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construction.) We introduce the index set 

I = r^'^{V) ^{ieV:i is finite}. 

Let Def(y) denote the collection of all sets X CV, 1st order definable 
in V by e-formulas having sets in V as parameters. 

Lemma 4. There exists an ultrafilter U over I satisfying the following 
two properties: (A) /q = e / : a e i} e [/ whenever a 

(B) {xeV : the set = {i ■ (^, x) G P] is in U} belongs to Def (F) 
whenever P C I x V, P e Def{V). 

Proof. The construction is divided onto three stages. 

1. We define Uq to be the collection of all sets of type {i G / : a G i}, 
where a E V. It is evident that Uq has the finite intersection property (f.i. p.) 
which states that the intersection of any finite number of sets contained in 
the collection is nonempty. 

2. We fix an enumeration Xkih^), k > 1, of all parameterfree 
G-formulas with i and x as the only free variables. Recall that V is 
wellordered by the order relation <l so that the order type of V is "d. Let 

Xa { a < i) ) he the a. th element of V with respect to <l • The sequence 
{xa : a < 1?) belongs to Def{V) because <l restricted to V belongs to 
Def(y). We define 

Ak{a) = {z G J : Xkih Xa) is true in V} and Ck{a) ^ I\Ak{a). 

One can construct by induction on k and, for a given k, by induction on 
a, a collection of sets C T^. G Def(y), such that the following sets 

Uk ={Ak{a) : a G Tfe} U {Ck{a) : a G \ T^}, 
Uk^ ={Ak{a):aeTkfM}[J {Ck{a) : a e -f\Tk}, 

satisfy the condition that the union L^o U ••• U ^4-1 U has the f.i. property 
for all k>l and 7 < The decision which of the sets Ak{a), Cfc(a) has 
to be adjoined to Uk is made so that we select Ak{a) provided this does 
not violate f.i. p., and we select Ck{a) otherwise. 

3. We set Uoo = Ufcew Uk and extend Uoo to an ultrafilter U over /. 
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The ultrafilter U is as required. One can easily verify (B) using the property 
of definabihty of the sequence {xa : a < -d). □ 

It is assumed henceforth that U is an uhrafiher given by the lemma. 
Take notice that the property (B) of the ultrafilter U is essential only for 
the construction of the extension *V ' but not for *V . 

We introduce a convenient tool, the quantifier "there exist U -many" by 

\Ji(p{i) if and only if {i E I : <p{i)} £ U. 

The following is the list of properties of U implied by the definition of an 
ultrafilter and ( this regards (U5) and (U6)) the choice of the ultrafilter U. 

(Ul) Lf < > U i If whenever i is not free in ; 

(U2) if Vi[(/?(i) — > VW] then V i ip{i) — > UiV^(i); 

(U3) U i ip{i) k V i i — > V i [ip{i) k ; 

(U4) \Ji-Mp{i) < — > -.Uz(^(i); 

(U5) a aeV then Vi (a e i) ; 

(U6) LetPCIxV, P e Dei{V). Then 

{xe V:\Ji {{i,x) e P)} e Dei{V). 

The "falsity" extension. The union of ultrapowers of V via [/'', r E uj, 
is used to obtain a regular 1ST extension *V of V where (*) fails. We 
put 

*Vr = {/ : / is a function, f : T — > V}. 
In particular, *Vo — {*z : z e V}^ where *z — {(0, z)}, since /° = {0}. 

The set *V = UrGw *Vr is what we call the falsity extension. 

To continue notation, we let, for F E *V , r{F) denote the unique r 
satisfying Fe *Vr. If F e V, q>r = r{F), i = (ii, v, 2^) G J'', 
then we put = Note that F[i\ = F(i) whenever r = q. 

We define finally *z[i\ = z for all *z e Vq and i e /^ r > 0. 

Let F,Ge *V and r = max{r(F), r(G')}. We set 
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F*eG if and only if U ir Uv_i...Uzi (F[i] e G[i]); 

F*^G if and only if U v U v_i...Uzi = 

of course i denotes the sequence ii,...,ir- 

The definition of standardness in *V is given by: 

*st F if and only if there exists x E V such that F *= *x. 

So up to the relation *= the level Vq is just the standard part of *V . 

Let, finally, $ be a formula with parameters in *V . Wc define 
r($) = max{r(F) : F occurs in $}. If in addition r > r($) and i G F, 
then let $[i] denote the result of replacing each F that occurs in $ by 
Clearly $[i] is a formula with parameters in V. 

Propositions. (V; =, ^, %t) is a regular 1ST extension of V where 
(*) /az/s. 

Proof. The following principal statement plays the key role. 

Lemma 6. [Los Theorem] Let $ be an internal formula with parameters 
in *V and suppose that r > r(<l>). Then 

^ is true in *V < — > Uv ... Uii v] istrueinV). 

Proof of the lemma. The proof goes by induction on the logical complexity 
of We abandon easy parts of the proof, based on properties (U2), (U3), 
(U4) of the quantifier U, and consider the induction step 3. Thus the 
lemma is to be proved for a formula 3x^{x) in the assumption that the 
result holds for $(-F) whenever F e *V . We denote r = r($). 

The direction — > . Suppose that 3x^(x) holds in *V . Then $(-F) 
holds in *V for some F E *V . Let p = max{r, r(F)}. To convert the 
reasoning into a more convenient form, we let i and j denote sequences 

{e r) and {ii, ...,ir, ...,ip) (e 

respectively. Further let Ui and Uj denote sequences of quantifiers 

Uir-.-Uii and Uzp ... Ui^ ... Uii. 
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Thus Uj [j] holds by the induction hypothesis. We note that, for all 

j, [j] — ^ 3a;$(a;)[j]. Hence Uj3x$(x)[j] is true by (U2). We note 

also that the formula 3x^{x) [j] coincides (graphically) with 3x^{x) [i] 
because r(3x$(x)) = r < p. Hence, deleting the superfluous quantifiers 
by (Ul), we obtain Ui 3x ^{x) [i]. 

The direction < — . Let ^{x) be ^{x,G, H, ...,), where G,H,...e *V . 
Suppose that Ui 3a; ^{x) [i] holds, that is, 

Ui [3x^x,G[i],H[i\,...) is true inV]. 

For each i e /'', if there exists some x e V such that G[i], ...) 
is true in V, then we let F(i) be one of x of such kind; otherwise let 
= 0. By definition, F e *Vr and 

Vie r [3a;$(x)[i] — > 

therefore Ui 3a; [i] — > Ui <I>(F) [i] by (U2). Recall that the left- 
hand side of the last implication has been supposed to be true. So the 
right-hand side is also true. Then ^{F) holds in *V by the induction 
hypothesis, and we are done. □ 

The just proved lemma easily implies logical equality axioms for =, and 
Transfer, therefore all ZFC, in *V . Standardization is evident because every 
set V of the form V — has the property that ii Y C X e V then 
Y eV. We prove Idealization. 

Thus let ip{x, a) be an internal formula with parameters in V . We 
denote r = r{if) and prove the following: 

V^**^M3xVae Av?(x,a) — > 3a;W^(x,a) 

in *V . (The implication < — does not need a special consideration be- 
cause it follows from Standardization that elements of finite standard sets 
are standard, see Nelson [1977].) Lemma 6 converts the left-hand side to the 
form: 

V'^°A C V V ir ...V ii3xy a e A {cp{x,a)[iu .■.,^r])■ 
Reca]\ that / consists of all finite subsets of V, so we may replace the 
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variable A by i, having in mind that i E I. Further define A : f"*"^ — > V 
by A{ii, ...,ir,i) = i. Then A E *V . The left-hand side takes the form 

y i U ir ■■■U ii (3xVa e A (p{x, a)) [zi, i]. 

Changing Vi by Ui, we obtain 3a; Va e A ip{x,a) in V again by the 
lemma. So, to verify the right-hand side of Idealization, it suffices to prove 
*a e A in *V for all a eV. This is equal to 

U z U V ... Uii {a & A[ii, ...,ir,i]), 

by the lemma, and then to Ui ... U ii (a G i) by the definition of A. 
So apply (Ul) and complete the proof of Idealization in *V . 

Thus *V is an 1ST model. Moreover it is a regular extension of V : one 
can easily verify the required properties of the embedding *. To complete 
the proof of Proposition 5 it remains to show that (*) does not hold in *V . 

We use the sequence of ordinals Let F e *Vq be defined by 

F{i) — {{n, Kn) '■ {n, Hn) G for all i & I. 

It is true in *V by Lemma 6 that F is a function defined on a subset of 
integers, and, for every n e lu, it is also true in *V that F{*n) is defined 
and equal to *«;„, hence standard. Thus the left-hand side of (*) is satisfied 
by F. 

The right-hand side cannot be satisfied since it would imply that there 
exists g E V s.t. g{n) = Kn for all n, a contradiction with Lemma 3. □ 

The "truth" extension. We continue the proof of Theorem 2. To get rid of 
such elements of *V as the considered above F, we build up the required 
ultrapower using only definable functions. Thus we set 

V ; = {F : r — > V, F e Def (y)} for all r. 

The model *V ' — \Jreu> *^ r is the truth extension. 
All other relevant definitions are the same as above. 

Proposition 7. *V ' is a regular 1ST extension of V where (*) is true. 
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Proof. To prove that *V ' is an 1ST model and a regular extension 
of V one can copy the proof of Proposition 5. The only notable difference 
is related to the direction < — in the proof of Lemma 6. The problem is 
that F e Def(y) should be guaranteed; otherwise one cannot claim that 

Fe v. 

To fix the problem we define F(i) to be the <L-least x satisfying the 
corresponding property. Thus F e Def(l/) because <l is definable in V. 

It remains to prove that (*) is true in *V ' . Thus let F e *V ' be such 
that it is true in *V ' that F is a function defined on integers and F[n) is 
standard for every standard n. We set, for all n E u and x e V, 

g{n) — X if and only if F{*n) — *x in *V ' . 

Then g is defined at all n e a; and F{*n) — *g{n) in V ' for all n. 
Moreover g is definable in V. Indeed, 

g(n) = x < > lJir...lJii[{F{*n) = *x)[ii,...,ir]] 

by Lemma 6 ( r = r{F) ). The relation in outer brackets (in r + 2 variables) 
is definable in V since F e Def(V). Finally the action of U keeps the 
definability by (U6). Thus g is definable in V, therefore g eV. 

To end the proof we define G = *g. Then, for all n, it is true in *V ' 
that F{*n) = G{*n). □ 

This completes the proof of Theorem 2. □ 

The proof without models. To avoid the assumption of the existence 
of a cardinal such that is a ZFC model, we apply a logical trick. We 
extend the e-language of ZFC by a special constant V and add the axiom 
of constructibihty V = L, the statement 

(Mod) V has the form V = for a cardinal of countable cofinality; 

and the collection of all sentences of type: " A holds in V " , where A is an 
axiom of ZFC, to the list of ZFC axioms. Let us denote the extension by 
ZFC[T>]. Thus 

ZfC[V] = ZFC + (Mod) + [V = L] + {A^: A is a ZFC axiom}. 
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where is the relativization of A to V. (To obtain A^ one has to 
replace every quantifier Qx in A by Qx eV.) 

Proposition 8. ZFC and ZFC [V] are equiconsistent. 

Proof. It is sufficient to prove that an arbitrary finite extension of ZFC 
of the type 

ZFCfi-[y] = ZFC + (Mod) + [V = L] + {<, A^}, 

where Ai,...,An are ZFC axioms, is equiconsistent with ZFC+[V = L]. 

We use the following statement (a kind of Reflection principle). For any 
finite fist Ai^...,An of e-sentences it is a theorem of ZFC that there exists a 
cardinal i? of countable cofinality such that is an elementary submodel 
of the universe V of all sets with respect to Ai, An- In particular, since 
all of Ai, An arc ZFC axioms here, all of them arc true in V^. 

We define, arguing in ZFC + [V = L], -i? to be the least among such 
ordinals and obtain an interpretation of ZFC^'^[y] in ZFC + [V = L] by 
interpreting \^ as V^. □ 

Proof of Theorem 1. Let, on the contrary, $ be a (paramcterfree) 

G-sentence such that the equivalence S < > {*) is an 1ST theorem. Let 

lg-pfin ^ finite part of 1ST sufficient to prove the equivalence. 

We argue in ZFC[y]. By axiom (Mod), V has the form V = where 
1? is a cardinal of countable cofinality. Let (k„ : n e a;) be a cofinal in -d 

countable sequence of ordinals. Let, finally, *V and *V' be the "falsity" and 
"truth" extensions of V defined as above. 

It is not assumed, of course, that \^ is a model of ZFC. However the 
given above reasoning related to "falsity" and "truth" extensions can be 
converted to the form: given an axiom A of 1ST, there exists a finite list 
Zi,...,Zn of ZFC axioms such that A is true in *V and *V ' provided 
= is a model of Zi,...,Zn. Therefore both *V and *V' are models of 
IST^". 

By the same argument, (*) is false in *V and true in *V' . Thus $ is 
false in *V and true in *V' by the choice of IST^°. 
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By the same argument, this imphes that $ is simultaneously false and 
true in V. This proves that ZFC [V] is inconsistent, a contradiction with 
Lemma 8 and the assumption that ZFC is consistent. □ 



References 

I. van den Berg [1987] 

Nonstandard asymptotic analysis (Lecture Notes in Math. 1249, Springer). 

F.Diener and M.Diener [1988] 

Some asymptotic results in ordinary differential equations, in: N.Cutland 
(ed.) Nonstandard analysis and its applications (London Math. Soc. 
Student Texts 10, Cambridge Univ. Press), pp. 282 - 297. 

F.Diener and G.Reeb [1989] 

Analyse non standard (Herrmann Editeurs). 

V.G.Kanovei [1991] 

Undecidable hypotheses in Edward Nelson's internal set theory, Russian 
Math. Surveys, 46, pp. 1 - 54. 

E.Nelson [1977] 

Internal set theory; a new approach to nonstandard analysis. Bull. Amer. 
Math. Soc. 83, 1165 - 1198. 

E.Nelson [1988] 

The syntax of nonstandard analysis, Ann. Pure and Appl. Log. 38, 123 
- 134. 

M.Rcckcn [1992] 

On external constructions in internal set theory. Expositiones Mathe- 
maticae, 10, 193 - 247. 



12 



